Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

Webalizer Panel - Detect

By kannthu

Informative
Vidoc logoVidoc Module
#panel#webalizer#edb
Description

What is the "Webalizer Panel - Detect" module?

The "Webalizer Panel - Detect" module is designed to detect the presence of the Webalizer panel on a website. Webalizer is a web server log analysis tool that provides usage statistics for websites. This module focuses on identifying the version of Webalizer and the presence of usage statistics on the target website.

This module is classified as informative, meaning it provides valuable information about the target website but does not indicate any specific vulnerabilities or misconfigurations.

This module was authored by pdteam.

Impact

The impact of the "Webalizer Panel - Detect" module is limited to providing information about the presence and version of the Webalizer panel on the target website. It does not directly indicate any security risks or vulnerabilities.

How does the module work?

The "Webalizer Panel - Detect" module works by sending a GET request to the "/webalizer/" path on the target website. It then applies two matching conditions to determine if the Webalizer panel is present:

- The first matching condition checks if the response contains the words "Webalizer Version" and "Usage statistics for". This indicates that the Webalizer panel is being used on the website. - The second matching condition verifies that the HTTP response status is 200, indicating a successful request.

If both matching conditions are met, the module reports the detection of the Webalizer panel on the target website.

For example, the module sends a GET request to "/webalizer/" and expects a response containing the words "Webalizer Version" and "Usage statistics for" along with a 200 status code.

It's important to note that this module only detects the presence of the Webalizer panel and does not perform any further analysis or exploitation.

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/webalizer/
Matching conditions
word: Webalizer Version, Usage statistics forand
status: 200
Passive global matcher
No matching conditions.
On match action
Report vulnerability